loopctl-mcp-server 2.57.0 → 2.58.0

package/README.md

@@ -139,10 +139,10 @@ autonomous agent) can self-remediate without a human. Full agent-tenant lifecycl
 
 | Tool | Description |
 |---|---|
-| `get_tenant` | Get current tenant info. Use to verify connectivity. |
+| `get_tenant` | Get current tenant info. Use to verify connectivity, and to read `capabilities` — which surfaces your `trust_tier` includes — before attempting a write. |
 | `list_projects` | List all projects in the current tenant. |
 | `resolve_project` | Resolve a repo to its `project_id` in one cheap call — provide any of `slug`, `repo_url` (`git@github.com:owner/repo.git`, `https://github.com/owner/repo`, and bare `owner/repo` all match), or `name`. Precedence `slug > repo_url > name`, first match wins. Use the returned `id` to scope captures/recall (`memory_*`, `recall_context`). `404` `not_found` if nothing matches, `422` `no_identifier` if none supplied, `409` if a fuzzy identifier matches more than one active project. |
-| `create_project` | Create a new project in the current tenant. |
+| `create_project` | Create a new **work** project (epics/stories/custody). Requires orchestrator+ **and** a `human_anchored` tenant; an agent-rooted tenant gets `403 custody_tier_required` and should use `create_kb_scope`. |
 | `delete_project` | **Requires `LOOPCTL_USER_KEY`.** Delete a project and all of its dependent resources (epics, stories, audit entries). Irreversible — orchestrator role is not sufficient. |
 | `get_progress` | Get progress summary for a project, including story counts by status. Pass `include_cost=true` for cost data. |
 | `import_stories` | Import stories into a project from a structured payload (Epic 12 import format). Pass `merge: true` to add stories to epics that already exist (otherwise duplicates return 409). For large payloads, use `payload_path` to read JSON from disk instead of passing it inline. |

package/index.js

@@ -2461,7 +2461,17 @@ const TOOLS = [
   // Project Tools
   {
     name: "get_tenant",
-    description: "Get current tenant info. Use to verify connectivity.",
+    description:
+      "Get current tenant info. Use to verify connectivity, AND to discover which surfaces " +
+      "your tenant's trust_tier includes BEFORE attempting a write. The response carries " +
+      "`capabilities`: `surfaces` (each surface -> \"allowed\" | \"requires_human_anchor\"), " +
+      "`allowed`/`blocked` lists, `descriptions`, and `remediation` when something is blocked. " +
+      "Read the live `allowed`/`blocked` lists from the response — they are the authoritative, " +
+      "current split for your TIER — instead of probing for a 403 per endpoint. Two bounds, " +
+      "restated in the payload as `scope: trust_tier_only` and `applies_to: mutating_actions`: " +
+      "the ROLE gate is separate (an `allowed` surface can still return 403 `insufficient_role` " +
+      "if your key's role is too low), and READS stay open on every surface, including blocked " +
+      "ones — `blocked` means writes.",
     inputSchema: {
       type: "object",
       properties: {},
@@ -2512,7 +2522,14 @@ const TOOLS = [
   },
   {
     name: "create_project",
-    description: "Create a new project in the current tenant.",
+    description:
+      "Create a new WORK project (kind: work) in the current tenant — the container for " +
+      "epics/stories/dispatch and the chain-of-custody surface. Requires orchestrator+ role " +
+      "AND a human_anchored tenant (WebAuthn signup ceremony); an agent_rooted tenant gets " +
+      "403 custody_tier_required, by design — a tenant must not be able to open a custody " +
+      "surface for itself. If you only need a project row to scope KNOWLEDGE to the repo you " +
+      "are on, use create_kb_scope instead (agent role, no human anchor). Call get_tenant " +
+      "first and read `capabilities` to see which of the two applies to your tenant.",
     inputSchema: {
       type: "object",
       properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopctl-mcp-server",
-  "version": "2.57.0",
+  "version": "2.58.0",
   "description": "MCP server for loopctl \u2014 structural trust for AI development loops",
   "type": "module",
   "main": "index.js",